CVE Feed

    Dashboard / CVE / CVE-2009-1493

    CVE-2009-1493

    The customDictionaryOpen spell method in the JavaScript API in Adobe Reader 9.1, 8.1.4, 7.1.1, and earlier on Linux and UNIX allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a PDF file that triggers a call to this method with a long string in the second argument.

    Published:Apr 27, 2009
    Last Modified:Apr 23, 2026
    EPS:Apr 30, 2009
    EPSS Score:0.76196
    CVSS Score:6.8

    Affected Products

    Vendor
    Adobe
    Product
    Reader
    Vendor
    Linux
    Product
    Linux Kernel
    Vendor
    Redhat
    Product
    Rhel Extras

    Exploits

    http://packetstorm.linuxsecurity.com/0904-exploits/spell.txthttp://www.securityfocus.com/bid/34740http://packetstorm.linuxsecurity.com/0904-exploits/spell.txthttp://www.securityfocus.com/bid/34740https://www.exploit-db.com/exploits/8570

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2018-16042 (CVSS 6.5) — Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and e…
    CVE-2017-11260 (CVSS 8.8) — Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 1…
    CVE-2017-11214 (CVSS 8.8) — Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 1…
    CVE-2017-11243 (CVSS 6.5) — Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 1…
    CVE-2017-11212 (CVSS 8.8) — Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 1…
    CVE-2017-11209 (CVSS 6.5) — Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 1…
    CVE-2017-11232 (CVSS 6.5) — Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 1…
    CVE-2017-11220 (CVSS 8.8) — Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 1…
    CVE-2017-11219 (CVSS 8.8) — Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 1…
    CVE-2017-11238 (CVSS 6.5) — Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 1…

    References

    http://blogs.adobe.com/psirt/2009/04/update_on_adobe_reader_issue.html
    http://blogs.adobe.com/psirt/2009/05/adobe_reader_issue_update.html
    http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00001.html
    http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html
    http://osvdb.org/54129
    http://packetstorm.linuxsecurity.com/0904-exploits/spell.txt
    http://secunia.com/advisories/34924
    http://secunia.com/advisories/35055
    http://secunia.com/advisories/35096
    http://secunia.com/advisories/35152
    http://secunia.com/advisories/35358
    http://secunia.com/advisories/35416
    http://secunia.com/advisories/35734
    http://security.gentoo.org/glsa/glsa-200907-06.xml
    http://sunsolve.sun.com/search/document.do?assetkey=1-66-259028-1
    http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=926953
    http://www.adobe.com/support/security/bulletins/apsb09-06.html
    http://www.kb.cert.org/vuls/id/970180
    http://www.redhat.com/support/errata/RHSA-2009-0478.html
    http://www.securityfocus.com/bid/34740
    http://www.securitytracker.com/id?1022139
    http://www.us-cert.gov/cas/techalerts/TA09-133B.html
    http://www.vupen.com/english/advisories/2009/1189
    http://www.vupen.com/english/advisories/2009/1317
    https://exchange.xforce.ibmcloud.com/vulnerabilities/50146
    https://www.exploit-db.com/exploits/8570
    http://blogs.adobe.com/psirt/2009/04/update_on_adobe_reader_issue.html
    http://blogs.adobe.com/psirt/2009/05/adobe_reader_issue_update.html
    http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00001.html
    http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html
    http://osvdb.org/54129
    http://packetstorm.linuxsecurity.com/0904-exploits/spell.txt
    http://secunia.com/advisories/34924
    http://secunia.com/advisories/35055
    http://secunia.com/advisories/35096
    http://secunia.com/advisories/35152
    http://secunia.com/advisories/35358
    http://secunia.com/advisories/35416
    http://secunia.com/advisories/35734
    http://security.gentoo.org/glsa/glsa-200907-06.xml
    http://sunsolve.sun.com/search/document.do?assetkey=1-66-259028-1
    http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=926953
    http://www.adobe.com/support/security/bulletins/apsb09-06.html
    http://www.kb.cert.org/vuls/id/970180
    http://www.redhat.com/support/errata/RHSA-2009-0478.html
    http://www.securityfocus.com/bid/34740
    http://www.securitytracker.com/id?1022139
    http://www.us-cert.gov/cas/techalerts/TA09-133B.html
    http://www.vupen.com/english/advisories/2009/1189
    http://www.vupen.com/english/advisories/2009/1317
    https://exchange.xforce.ibmcloud.com/vulnerabilities/50146
    https://www.exploit-db.com/exploits/8570

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High